Why is Twitch OAuth redirecting to a link with query strings separated by '#'?

I am creating a user login with the OAuth. Everything seems to work fine but Twitch redirect URI is messed up by the # where ? has to be.

My redirect URI:
https://localhost:7681/authorize

URI Twitch redirects to:
https://localhost:7681/authorize#access_token=43rvpckrXXXXXXXXx1q6tdg&scope=user%3Aread%3Aemail&state=%24%7Bdata.uid%7D&token_type=bearer

I already tried adding a trailing slash, nothing changed.

As a result I can’t read the parameters as query parameters in Express JS.

you requested a token for type token instead of a token of type code

token aka Implicit Auth is for client side apps and will generte and return a access token via location hash

“Normal” oAuth, aka " Authorization code grant" will return a ?code that is to be exchanged for an access token.

Essentially your <a href triggered the wrong token flow

Additionally you should never post generated access tokens publically. Since someone can take it and abuse it or just revoke it. Or in this case acquire your private email address.

Thank you so much! Apparently I accidentally took the wrong example URI from the documentation. It works perfectly now!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.